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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

Claim 1 (Currently Amended): An authentication system comprising a server 
system communicably connected to in which a communication terminal is communicubly 
eonneeted4o -a-s er^e - r -sysfen via a communication network means, wherein an - authentieated 
result fe y a user who handles the communication communitarian terminal to access data stored in 
is made reference to provide data from the server system to the communieation-terminai via the 
communication network means , the server system comprising: 

a first authentication unit configured to receive user-identifying information from the 
communication terminal via the communication network, authenticate the user-identifying 
information mwsmitted fr<>ni the<-onmnHiication temhtud. and generate first key information 
based on the authenticated user-identifying information so fhat jhe first key information is being 
transmitted feem- the server system to the communication terminal to the user ; 

a second authentication unit configured to receive the first key information from the 
communic ation ter minal via the communication network, to authenticate the first key 
information transmitted from the communication terminal , and generate second key information 
to access ihe- -data based on the first key information , the second key information entitling the 
user to re peatedl y access the data in the s er ver s ystem for a spec ified period of time as long as 
the communication terminal is activated and so-that the second key information is being 
transmitted from the server system to the communication terminal via the c om munic atio n 
network; and 

an access permitting unit configured to r eceive the second key information from the 
communication terminal via the communication network and te permit the user to access the data 
in the server system to be accessed within a for the specified pr e det e rm ined period of time every 
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time the user accesses the ser ver system the access being carried out on the basis of the second 
k-m p information transmitted from the communication terminal . 

Claim 2 (Currently Amended): The authentication system according to claim 1 , 
further comprising a second server system which is connected to the communication network 
and different from the server system generating the second key information , 

wherein the second server system comprises a third authentication unit configured to 
authenticate validity of the second key information generated the server system . 

Claim 3 (Currently Amended): The authentication system according to claim 2 
[[!]], wherein the second server system is configured to set a period of time to permit the user to 
access te the data on the basis of both of a time instant at which the second key information is 
generated acquired and a an-a ecessible period of time remaining in the specified predetermined 
period of time set for the access to be carried out using the second key information . 

Claim 4 (Currently Amended): A server system for use in an authentication system 
and which is communicably connected with a communication tenninal via a communication 
network means , wherein an - a H th e nt - ieated - r - e s H - k - fo f a user handles the communication 
communitarian terminal to access data stored in is made reference to provide data from the 
server system to the communication terminal via the communication network means , the server 
system comprising: 

a first authentication unit configured to receive user-identifying information from the 
communication terminal via the communication network, authenticate the user-identifying 
information t ransmitted ■■ #oiH-the^mmiiHieaitiefl4ermmal J _and generate first key information 
based on the authenticated user-identifying information, so- tha t the first key information being 
is transmitted from the-server system to the communication tenninal to the user ; 

a second authentication unit configured to receive the first key information from the 
com munication terminal via the communication network, authenticate the first key information^ 

transmitted from the conHnunicationtorminal and generate second key information to access the 

data based on the first key information , the second, ke y in f ormation entitling the user to 
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repeatedl y a ccess the data in the sewer system for a specified period of time as long as the 
communication terminal is activated and so-feat the second key information being se transmitted 
fr - Offl-the s e - r -v er system to the communication terminal via the communication network; and 
an access permitting unit configured to receive t he second key information from the 
communication terminal via the communication network and to permit the user to access the data 
in the server system to be acce s sed-with - in-a for the specified predetermined period of time every 
time t he user accesses the ser ver system the access being carried out on the ba s i s -of-the s ee ond 
key information transniitted - from the communication terminal. 

Claim 5 (Currently Amended): The server system according to claim 4, wherein the 
first key information is an access key for accessing to access to the data stored in the server 
system to acquire the second key information and the second key is a s cession session key for 
accessing the data in the server system and requesting transmission c on t r ol of the data. 

Claim 6 (Currently Amended): The server system according to claim 4, in cases 
where the user-identifying information is transmitted using a second communication terminal 
other than the communication terminal handled by the user, the first authentication unit 
transmits, to the second communication terminal, a second access key generated based on the 
user-identifying information provided from the second communication terminal, the second 
access key being regarded as being the same as the previously-generated access key. 

Claim 7 (Currently Amended): The server system according to claim 4, wherein the 
communication terminal is configured to pro vide previ o u sl y have predetermined terminal - 
identifying information being-sent to the server system together with the user-identifying 
information, wherein the terminal-identifying information is used for the authentication by the 
first authentication unit . 

Claim 8 (Currently Amended): An authentication method [[,]] carried out by a 
server system communicably connected to in - wh i e -h a communication terminal is communica bly 





conn e ct ed to - 



s y stem via a communication network means, wherein an-autbenticated 
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result-ibr a user -wfee handles the communication e o a- mnun -t tai - i an terminal to have access to is 
hi ade refer enee to-pro vide data stored in frem the server system te-the-^efflBH«H€aM^R4^ftfflal 
via the communication network mean s, the method comprising steps-of: 

receiving user-identifying information transmitted from the communication terminal 
via the communication network ; 

authenticating the received user-identifying information ■ tran s mitted-frem-the 

generating , only once, first key information based on the authenticated user-identifying 
information; 

transmitting so that the first key information is transmiucd horn the server system to 
the communication terminal; 

receiving the first key information from the communication terminal via the 
communication network ; 

authenticating the r ec eiv e d first key information tran s mitted ' from - th e -cemfflunieation 

generating second key information to access the data based on the first key 
informatio n, the second key information entitling the user to periodically access the data in the 
server system for a specified period of time as long as the communicatio n terminal is activated ; 

transmitting so that the second key information is-&aagfffltted-#eaa4h e server s ystem 
to the communication terminal via the communication network ; and 

receiving the second key information from the communication terminal via the 
communication net work; and 

permitting the user to ac ces s the data in the ser ver system for the specified to be accessed 

within a p rede termin ed period of time every time the user accesses the server system the access 

bein g - earned - out- on th^^ transmitted fro m-th^-eoffl- muni cation 

Claim 9 (Currently Amended): The authentication method according to claim 8, 
wherein the first key information is an access key for accessing to access to-the-data-stored in the 
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server system to acquire the second key information and the second key is a session cession key 
for accessing the data in the server system and req uesting transmission control of the data. 

Claim 10 (Canceled). 

Claim 1 1 (Currently Amended): The authentication method according to claim 8, 
wherein the communication terminal provides previously has prede ter mined terminal-identifying 
information being- s ent to the server system together with the user-identifying information^ 
wherein the authenticating of the user-identifying information uses the terminal-identifying 
information . 

Claim 12 (Currently Amended): The authentication method according to claim 8, 
further comprising t he ste p -of authenticating validity of the second key information genera t ed t h e 
ser ver sy s tem . 

Claim 13 (Currently Amended): The authentication method according to claim 8, 
wherein the generating of the second-key information generating -s te - p includes the step of setting 
a period of time to permit the us er to the access te the data in the server system on the basis of 
both of a time instant at which the second key information is generated acquired and a an 
aeees& ible period of time remaining in the specified pfedetem-med period of time set for the 
access to be carried out using the second key info rmation. 

Claim 14 (Canceled). 

Claim 1 5 (Currently Amended): A computer program product comprising a 
computer readable recording medium having storing th e reon a computer-readable program code 
embodied thereon, the program code, when executed., being adapted to carry out the method of 
djUinJj in s talled in a server system ■ com m uni cab ly co nn ected ■ with a communication terminal via 
eo mmunioa ti en - means, wherein an authenticated re sult for a use r who handles4he 
communitarian terminal is made reference to provid e- data-frota-the server system, to tho 
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communication terminal via the conimuiH^^efrmeatM ' r^ie ' pregram-m ' al^es a-eomputef - r e afe e 

the - fairation s- eft 

f^ . r s t ... a^tlien li e at i e a - mea n s - f of a\athe n tic a tin g xi s er - id - en t i f > ^ i n g information transmitted 
from the communication terminal and generate first key information based on the u s er 

ide ntifying information so that the first key information - i s transmitted from She server system 

to-the-eoniinunication terminal-; 

second auth e ntication - means for authenticating the first key information transmitted from 
the communication terminal and generate second key information to a oe e ss- the - data -ba s ed - on -the 
-fi rst key information so that the second key in Ibnnat-HHi-iMransinittcd from the server- system to 
the communication terminal:- and 

period of time, the access being earned out on the ba s is of the-second key information 
tran s mitted - from Ah^-eoffimmiiGs^km^-imRiBsA . 



Claim 16 (New): An authentication method for authenticating a user terminal 
requesting access to data stored in a server system, the method comprising: 
receiving secured user information from a user of the user terminal; 
authenticating the received user information; 

generating an access key based on the authenticated user information; 
transmitting the access key to the user; 

receiving the access key from the user terminal via a communication network at a time of 
a first request for accessing the data stored in the server system.; 

authenticating the access key received from the user terminal; 

generating a session key based on the access key received from the user terminal; 

transmitting the session key to the user terminal via the communication network; 

receiving the session key from the user terminal via the communication network; 

permitting the user terminal to access the data in the server system if the session key is 
received within some period of time subsequent to the transmitting of the session key to the user 
terminal via the communication network; and 
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transmitting additional session keys to the user terminal via the communication network 
in response to receiving the same access key from the user terminal via the communication 
network at times of additional requests for accessing the data stored in the server system 
subsequent to the time of the first request. 

Claim 1 7 (New); The method according to claim 16, wherein the secured user 
information is not received again at the subsequent times of the additional requests for accessing 
the data. 

Claim 1 8 (New): The method according to claim 16, wherein the secured user 
information is secured using a secure sockets layer protocol. 

Claim 1 9 (New): The method according to claim 1 6, further comprising: 
receiving the same access key from at least one other, different user terminal; 
generating a session key based on the access key; 

transmitting the session key to the other user terminal via the communication network; 
receiving the session key from the other user terminal via the communication network; 

and 

permitting the other user terminal to access the data in the server system if the session 
key is received within some period of time subsequent to the transmitting of the session key to 
the other user terminal via the communication network. 

Claim 20 (New): The method according to claim 16, further comprising: 
generating at least one other access key based on the authenticated user information; 
transmitting the other access key to at least one other different user terminal; 
receiving the access key from the other user terminal via the communication network at a 
time of a first request for accessing the data stored in the server system; 

authenticating the access key received from the other user terminal; 

generating a session key based on the access key received from the other user terminal; 

transmitting the session key to the other user terminal via the communication network; 
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receiving the session key from the other user terminal via the communication network; 

and 

permitting the other user terminal to access the data in the server system if the session 
key is received within some period of time subsequent to the transmitting of the session key to 
the other user terminal via the communication network. 

Claim 21 (New): The method according to claim 16, further comprising: 
receiving a hardware identifier transmitted from the user terminal over a communication 
network, 

wherein the authenticating is based on both the secured user information and the 
hardware identifier. 
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